nodejs-march-2026-security-releases: Tuesday, March 24, 2026 Security Releases
Published Mar 24, 2026
·Updated
Updates are now available for the 25.x, 24.x, 22.x, 20.x Node.js release lines for the following issues.
This security release includes the following dependency updates to address public vulnerabilities:
undici (6.24.1, 7.24.4) on 22.x, 24.x, 25.x
Affected Software
1 affected component
Node.js Node.js
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
undicito a version that resolves this vulnerability.Fixed in 6.24.1 - Upgrade
Upgrade
undicito a version that resolves this vulnerability.Fixed in 7.24.4
Event History
Mar 24, 2026
Advisory Published
via Node.js·03:00 AM
Data Sourced
via Node.js·03:00 AM
Description
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
1
Which Node.js release lines have updates available?
Updates are available for the 25.x, 24.x, 22.x, and 20.x Node.js release lines.
2
Which release lines received the Undici dependency updates?
Undici was updated to 6.24.1 and 7.24.4 on the 22.x, 24.x, and 25.x Node.js release lines.